
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
File: UjrFjamEDQscqom9_54NzkZ2fEo.mft (raw, json)
Hash identifier: oPPbwh0p1WlJ0vI9icKI/VOF8Td+4nWTvzvPT8bWvzo=
Subject key identifier: EA:06:62:1B:49:4D:5D:87:92:9B:DE:33:B6:C8:29:7D:75:57:CC:EC
Authority key identifier: 52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
Certificate issuer: /CN=A9124B27/serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
Manifest number: 0140
Signing time: Wed 29 Jul 2026 07:00:57 +0000
Manifest this update: Wed 29 Jul 2026 07:00:57 +0000
Manifest next update: Wed 05 Aug 2026 07:00:57 +0000
Files and hashes: 1: UjrFjamEDQscqom9_54NzkZ2fEo.crl (hash: FUjmNZaZauCjovIsbDLJGilcBTD9ykM0RkIov1b+2cg=)
2: EA7DD3B85B8011F19AAA063FA7833773.roa (hash: ga7RmHBxUIf+hUQhJPOXCSIER/vz19Y1P9LRsEGGGbg=)
3: 1D8F5C2E5B7F11F1B697DE78A6833773.roa (hash: klWUSQgK3IOTMfJYCoyqo1alTlwHxclvm8Ll88mJta4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124B27, serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Validity
Not Before: Jul 29 07:00:57 2026 GMT
Not After : Aug 5 07:00:57 2026 GMT
Subject: CN=6a69a529-3aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:db:e4:f5:2a:f5:52:8a:5d:b1:81:e6:f9:
e2:5a:d3:bc:b2:14:3b:48:03:9b:d4:30:a7:3d:24:
01:4d:12:90:22:09:0a:1e:55:df:5b:11:33:38:f4:
35:31:ac:5b:c1:b9:0d:6b:21:04:78:52:76:45:ef:
b9:6c:66:cc:70:48:4f:39:f4:a5:56:37:ad:9e:53:
01:2d:5f:bc:8d:a1:77:e2:3f:05:3c:ab:10:16:38:
8d:12:99:35:a0:ce:13:a8:6d:4c:75:91:7b:9d:a9:
60:30:08:dc:e0:06:e2:84:7d:ef:a9:f5:36:3f:4c:
37:9a:4d:ff:ef:06:a7:a7:ac:77:99:6f:bc:bb:81:
c5:17:32:a6:1d:c4:cc:cf:ed:91:30:36:9f:fd:93:
e5:b4:8f:03:d3:36:d0:95:55:b0:1d:b5:dc:67:62:
47:90:e2:d9:e6:c4:35:64:e4:30:85:4a:22:d2:ea:
bd:b1:e5:29:e3:cf:84:f4:ec:c7:ad:31:0f:17:59:
a5:09:8f:6b:cc:5b:57:02:bb:d0:92:19:2c:49:cb:
46:52:bc:18:58:75:2f:7c:4a:db:08:76:00:fd:4f:
c7:aa:d5:99:04:de:2a:b3:02:dc:54:d0:68:e8:79:
57:84:e7:a3:8b:64:6c:87:d8:9e:24:dd:79:e3:1a:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:62:1B:49:4D:5D:87:92:9B:DE:33:B6:C8:29:7D:75:57:CC:EC
X509v3 Authority Key Identifier:
keyid:52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:11:c4:e4:b3:4f:26:8b:30:3d:da:4b:39:af:75:3a:67:d9:
0c:b6:ac:47:6b:79:be:b9:b8:ee:ab:aa:f2:55:c5:c3:a7:db:
3e:25:d3:cf:82:a1:40:e3:30:0d:4d:eb:a0:7a:fc:cc:82:5f:
3d:9d:02:1b:ef:c9:50:68:26:8c:1e:d1:62:0e:1d:ee:55:03:
d8:90:82:67:44:97:25:97:8b:51:26:b7:2e:51:14:98:a9:70:
dc:1f:75:39:d6:19:10:31:84:ed:da:7e:b0:55:e0:16:38:25:
0c:e7:ac:d6:b4:39:fc:a7:d0:18:8e:2c:0a:52:a1:f0:47:26:
bb:63:ed:9b:0f:fc:c2:e1:a6:ee:58:ad:f7:a9:45:29:55:01:
5b:08:8d:b8:49:8e:7d:53:f9:9c:08:17:52:5f:35:f5:a4:0d:
9e:9e:bd:94:0e:95:34:e6:a4:8d:0c:1b:0d:54:27:3c:5f:c3:
74:b8:15:f9:ed:ac:4a:31:3b:23:8d:54:79:9f:ba:67:6a:0f:
39:ab:72:87:05:7f:55:df:70:7b:c0:af:bc:4b:9b:6f:c6:7d:
0e:6c:f1:58:07:27:94:ee:89:5a:37:f1:c3:b7:ae:cd:d6:36:
df:69:8c:ba:3a:b2:9e:30:1b:f6:76:a5:8c:4a:9a:6c:0b:bc:
dc:33:87:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjRCMjcxMTAvBgNVBAUTKDUyM0FDNThEQTk4NDBEMEIxQ0FBODlCREZGOUUwRENF
NDY3NjdDNEEwHhcNMjYwNzI5MDcwMDU3WhcNMjYwODA1MDcwMDU3WjAYMRYwFAYD
VQQDEw02YTY5YTUyOS0zYWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArGfb5PUq9VKKXbGB5vniWtO8shQ7SAOb1DCnPSQBTRKQIgkKHlXfWxEzOPQ1
MaxbwbkNayEEeFJ2Re+5bGbMcEhPOfSlVjetnlMBLV+8jaF34j8FPKsQFjiNEpk1
oM4TqG1MdZF7nalgMAjc4AbihH3vqfU2P0w3mk3/7wanp6x3mW+8u4HFFzKmHcTM
z+2RMDaf/ZPltI8D0zbQlVWwHbXcZ2JHkOLZ5sQ1ZOQwhUoi0uq9seUp48+E9OzH
rTEPF1mlCY9rzFtXArvQkhksSctGUrwYWHUvfErbCHYA/U/HqtWZBN4qswLcVNBo
6HlXhOeji2Rsh9ieJN154xoMIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoGYhtJ
TV2HkpveM7bIKX11V8zsMB8GA1UdIwQYMBaAFFI6xY2phA0LHKqJvf+eDc5GdnxK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEIyNy81MDA2MThEQ0M2
RTgxMUVGODdBRTY5MERDNEY5QUUwMi9VanJGamFtRURRc2Nxb205XzU0TnprWjJm
RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VqckZqYW1FRFFzY3FvbTlfNTROemtaMmZFby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NEIyNy81MDA2MThEQ0M2RTgxMUVGODdBRTY5MERDNEY5QUUwMi9VanJGamFtRURR
c2Nxb205XzU0TnprWjJmRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAExHE5LNPJoswPdpLOa91OmfZDLasR2t5vrm47quq8lXFw6fbPiXTz4KhQOMw
DU3roHr8zIJfPZ0CG+/JUGgmjB7RYg4d7lUD2JCCZ0SXJZeLUSa3LlEUmKlw3B91
OdYZEDGE7dp+sFXgFjglDOes1rQ5/KfQGI4sClKh8Ecmu2Ptmw/8wuGm7lit96lF
KVUBWwiNuEmOfVP5nAgXUl819aQNnp69lA6VNOakjQwbDVQnPF/DdLgV+e2sSjE7
I41UeZ+6Z2oPOatyhwV/Vd9we8CvvEubb8Z9DmzxWAcnlO6JWjfxw7euzdY232mM
ujqynjAb9naljEqabAu83DOHoA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:08 2026 by rpki-client